Agent skill · security · aradotso
wxmini-security-audit
Automated WeChat mini-program security auditing framework using Claude Code Agent Teams with 7 specialized agents for comprehensive static analysis
Why this skill is useful
Adds a comprehensive automated security auditing framework with specialized agents for WeChat mini-programs, including executable scripts for static analysis and vulnerability detection.
What it needs
Requires python, unveilr.exe installed locally. About 7k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
wxmini-security-audit Skill by ara.so — Security Skills collection. Automated security auditing framework for WeChat mini-programs using Claude Code Agent Teams. Orchestrates 7 specialized agents to perform comprehensive static analysis covering sensitive information leakage, API endpoint extraction, cryptographic analysis, and vulnerability detection across seven security dimensions. What It Does Multi-Agent Orchestration: Coordinates 7 specialized agents (decompiler, secret scanner, endpoint miner, crypto analyzer, vulnerability analyzer, custom analyzer, reporter) Dual-Layer Architecture: Python regex scripts ensure 100% rule coverage, LLM agents provide intelligent analysis with context awareness Parallel Phase 2 Execution: Runs 4 analysis agents simultaneously to minimize audit time User Intent Parsing: Automatically triggers deep custom analysis when specific endpoints/parameters are mentioned Pure Static Analysis: Zero network requests, no attack code generation, fully local processing Comprehensive Reporting: Generates both summary reports and detailed documentation with structured data exports Architecture The framework operates in sequential phases: 1. Phase 0: User intent parsing (extracts target path, creates output directory, parses requirements) 2. Phase 1: Decompilation (unveilr.exe processes wxapkg files, generates file inventory) 3. Phase 1.5: Script pre-scanning (Python regex extracts raw endpoints and secrets) 4. Phase 2: Parallel analysis (4 agents run simultaneously: SecretScanner, EndpointMiner, CryptoAnalyzer, VulnAnalyzer) 5. Phase 2.5: Custom analysis (triggered only when user specifies particular endpoints/parameters) 6. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/wxmini-security-audit